【Debugging Notes】 How to Get a Cookie Sent on a Cross-Origin Request
Debugging notes on why a manually inserted cookie wouldn’t attach to a cross-origin API call — the Domain/Secure/SameSite rules browsers actually enforce, reproduced step-by-step in DevTools.
CookiesCORSSecurity
